The package has clear installation instructions, a stable release, and no install-time scripts. Its proprietary license and no repository activity since October 2022 make long-term adoption difficult.
40%
Total Score
25
63
75
The manifest declares a proprietary license, with no detected license text or license file. That creates a meaningful distribution and reuse constraint for a package presented as an open-source dependency.
Only two releases were published, both in October 2022, with no releases in the last 12 months. This strongly suggests the package is dormant rather than actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with activity stopping after October 2022. This is a substantial abandonment concern.
The registry lists one maintainer account. A single maintainer increases continuity risk, especially alongside the lack of recent release and commit activity.
The repository has zero stars and forks and one watcher. Low visibility does not prove poor quality, but it provides no supporting evidence of broad community review or adoption.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.